Over 7,000 Sask. patients have intimate medical info breached in lab hack
Over 7,000 patients in Saskatchewan had their intimate medical information breached by hackers, according to the province’s privacy watchdog.
In a report last week, the Saskatchewan Information and Privacy Commissioner wrote that the breach was proactively disclosed to his office by Innomar, which operates four clinics and a pharmacy in the province — situated in Regina, Saskatoon and Prince Albert.
According to Innomar, its parent company Cencora learned that data had been stolen from its system around February 2024, which it took steps to contain, and reported to provincial commissioner Ron Kruzeniski in May, 2024.
The information obtained by the hackers was extensive — names, addresses, birthdates, height, weight, phone number, email address, service locations, health conditions, prescription information, patient numbers, health insurance subscriber number, signature, lab results and medical history.
The breach did not affect the pharmacy in Saskatchewan, only the four clinics, which provide lab testing and blood work.
When it reached out to Kruzeniski’s office in May, Innomar said it took immediate steps to contain the breach and sought help from law enforcement and cybersecurity experts.
Innomar said it rotated credentials for all accounts in its system, disabled any accounts found to be compromised, identified the initial point of entry and blocked “all known indicators of compromise.”
“There has been no observed unauthorized activity since these containment steps were completed on February 21, 2024 and there is no evidence of ongoing unauthorized activity,” the company told the privacy commission.
All those affected by the breach — 7,293 people in Saskatchewan alone — were sent letters disclosing what happened, Kruzeniski writes.
Although some patients weren’t contacted until more than 100 days after the breach, Kruzeniski argues the company should be able to get its facts straight before contacting everyone affected.
He found Innomar did appropriately notify everyone affected by the privacy breach.
Innomar has offered to pay for credit monitoring for the affected patients for two years, but in his report, Kruzeniski recommends the company pay for a minimum of ten years of credit monitoring.
CTVNews.ca Top Stories
Alberta RCMP officer charged with 2 counts of sexual assault
Const. Bridget Morla, a Leduc RCMP officer, has been charged with two counts of sexual assault in connection with an incident that happened two years ago.
Ontario dad removes hockey rink at heart of neighbour dispute
A Markham dad who drew the ire of neighbours and the city after installing a hockey rink in his backyard says the rink has now been taken down.
Motivated by obsession: Canadians accused in botched California murder plot in police custody
Two Canadians are in police custody in Monterey County, California, after a triple stabbing police say was motivated by a B.C. man's obsession with a woman he played video games with online.
Kingston, Ont. doctor in 'disbelief' after being ordered to repay $600K for pandemic vaccination payments
An Ontario health tribunal has ordered a Kingston, Ont. doctor to repay over $600,000 to the Ontario government for improperly billing thousands of COVID-19 vaccinations at the height of the pandemic.
Trump demands immediate release of Oct. 7 hostages, says otherwise there will be 'HELL TO PAY'
President-elect Donald Trump is demanding the immediate release of the Israeli hostages still being held in Gaza, saying that if they are not freed before he is sworn into office there will be “HELL TO PAY."
Belly fat linked to signs of Alzheimer’s 20 years before symptoms begin, study says
As the size of a person’s belly grows, the memory centre of their brain shrinks and beta amyloid and tau may appear — all of this occurring as early as a person’s 40s and 50s, well before any cognitive decline is apparent, according to new research.
AC/DC reveals 2025 North American tour. This Canadian city is the only one to make the cut
Big news for AC/DC fans as the heavy metal bigwigs announced Monday they will hit the road next spring. But as of now, there’s only one Canadian show on the docket.
More RCMP and CBSA ‘human resources’ destined for border, Public Safety Minister LeBlanc says
Public Safety Minister Dominic LeBlanc says the federal government will 'absolutely' be adding more Canadian Border Services Agency (CBSA) and RCMP ‘human resources’ at the border.
Toronto Zoo shifts toward conservation, but critics want to eradicate animal captivity
The Toronto Zoo has been making a gradual, yet seismic shift towards prioritizing conservation and climate-change, focusing on breeding rare and endangered animals in the past few years. But critics say the zoo should focus all its resources on breeding animals for eventual release instead of keeping animals in captivity for display.